CVE-2023-3164
Heap-buffer-overflow in extractimagesection()
Summary
Heap-buffer-overflow in extractimagesection()
Original description
The description as published by the source.
A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-3164 tiff
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- report gitlab.com
- web access.redhat.com
- web packages.fedoraproject.org